A financial services company has grown through several acquisitions. The CISO is concerned that acquired business units have deployed internet-facing assets—domains, subdomains, public IPs, and web applications—that are unknown to the central security team and are not enrolled in Defender for Cloud. Leadership wants a solution that continuously discovers these unmanaged, externally exposed assets from an outside-in (attacker's) perspective, without requiring agents or prior knowledge of the assets. Which capability should the security architect recommend?